home

wwe-raw.soft32.com

Domain Information

Server location:
Washington, United States (US)

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc., US

Root domain:
soft32.com

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ZuluSoftSRL.N, PUP.Downloader.Bundler.Soft32 (M)
100.00%

Malwarebytes
PUP.Optional.Soft32
50.00%

VIPRE Antivirus
Soft32Downloader
50.00%

NANO AntiVirus
Riskware.Nsis.Downloader.cvxhzw
50.00%

Avira AntiVirus
APPL/Downloader.Gen
50.00%

ESET NOD32
MSIL/Soft32Downloader.C potentially unwanted application
50.00%

Trend Micro House Call
Suspici.B132687A
50.00%

McAfee
Artemis!C5FAB851F6B6
50.00%

Baidu Antivirus
PUA.Win32.Downloader.soft32
50.00%

AVG
Generic
50.00%

Norman
Suspicious_Gen4.HAMXC
50.00%

The domain wwe-raw.soft32.com has been seen to resolve to the following 10 IP addresses.

52.84.127.68
server-52-84-127-68.iad16.r.cloudfront.net
September 14, 2016

52.84.127.236
server-52-84-127-236.iad16.r.cloudfront.net
September 14, 2016

52.84.127.224
server-52-84-127-224.iad16.r.cloudfront.net
September 14, 2016

52.84.127.221
server-52-84-127-221.iad16.r.cloudfront.net
September 14, 2016

52.84.127.182
server-52-84-127-182.iad16.r.cloudfront.net
September 14, 2016

52.84.127.154
server-52-84-127-154.iad16.r.cloudfront.net
September 14, 2016

52.84.127.105
server-52-84-127-105.iad16.r.cloudfront.net
September 14, 2016

52.84.127.87
server-52-84-127-87.iad16.r.cloudfront.net
September 14, 2016

23.235.46.185
January 25, 2015

23.235.46.184
January 25, 2015

File downloads found at URLs served by wwe-raw.soft32.com.

1 / 68      (Adware)
http://wwe-raw.soft32.com/get/file/id/.../?lp=adwords&tg=us&kw=Play wwe games&mt=p&ad=36261445398&pl=&ds=s&gclid=COb1m_bUsb8CFSJo7AodZUkA5Q&uid=74ebb8daa1336cddb7af40a992403c47  (wwe raw setup.exe)

11 / 68    (Adware)
http://wwe-raw.soft32.com/get/file/id/.../?lp=adwords&tg=us&kw=Wwe raw&mt=&ad=50724154398&pl=3869.anonymous.google&ds=c&uid=141048052935f3d9a12c0bf9d9e6801c294ace81e8&_ga=496762748.1410480529&gclid=CIOhgbax2sACFQmBfgodG7wAOg  (wwe raw setup.exe)

The following 2 files have been seen to comunicate with wwe-raw.soft32.com in live environments.

TCP » 52.84.127.87:443
browser.exe (speed browser by Smart Applications)

TCP » 52.84.127.87:80
browser.exe (speed browser by Smart Applications)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.